OpenSandbox

Why we included this project

Running a coding or browser agent against your real infrastructure tends to end badly, which is why OpenSandbox exists as an isolation layer in between. It spins up throwaway sandboxes on Docker or Kubernetes and gives the agent a clean way to run commands, move files, and execute code without touching anything you actually depend on. The multi-language SDKs, the osb CLI, and an MCP server mean it plugs into agent stacks you already have instead of demanding a new framework. When workloads get heavier, the Kubernetes runtime handles distributed scheduling, and you can add gVisor or Kata as a stronger isolation boundary. If your agents need to run code or drive a browser in earnest, this spares you from building that safe execution backend from scratch.